Concepts of LDAP

1. LDAP (Lightweight Directory Access Protocol) Presented by Chandana 9/16/2010 1 © YIIT- confidential and proprietary

4. LDAP, provides a standard language that directory client applications and directory servers use to communicate with one another about data in directories.© YIIT- confidential and proprietary

6. LDAP is designed to be a standard way of providing access to directory services.

7. In computer networking, LDAP is a protocol for querying and modifying directory services running over network. Fundamentally it is a Network Protocol.© YIIT- confidential and proprietary 9/16/2010 3

8. 9/16/2010 4 The Structure of a Directory Entry Organization Name: YIIT Services Ltd. Street Address: Vijayanagar Colony, Trichanoor Road City: Tirupathi State: Andhra Pradesh Countey: India Phone Number: +91 XXXX-XXXXXX Our company is located at Secunderabad, and a branch of the company located in another place Tirupathi. How can we distinguish between these records? © YIIT- confidential and proprietary

10. The DN is always indexed and will always be returned in any search.A DN is composed of a combination of directory information, and looks something like this : dn: o=YIIT Services, l=Secundarabad, st=Andhrapradesh, c=INDIA dn: o=YIIT Services, l=Tirupathi, st=Andhrapradesh, c=INDIA © YIIT- confidential and proprietary

12. An entry is composed of a DN and one or more attributes – The DN serves as a unique identifier within an LDAP directory information tree – Attributes provide information about that entry © YIIT- confidential and proprietary

13. 9/16/2010 7 An Example LDAP Entry: Here the o=YIIT services, l=Secunderabad, st=Andhrapradesh, c=INDIA are the special attribute in this entry that is the DNs and the rest are normal attributes. © YIIT- confidential and proprietary

15. Mailing address (postal Address)

16. Locality (l), which may be the name of a city, town, village, and so forth

17. State or Province (st)

18. Postal Code or ZIP Code (postalCode)

19. Country (c)

20. Telephone Number (telephone Number)

21. Object Class (object class), which specifies what type (or types) of record this entry is© YIIT- confidential and proprietary

23. Creating new attributes requires writing a schema

24. You can add schema definitions to LDAP directories, making the LDAP entries easily extensible.

25. Each LDAP server has a schema.

26. The schemais the blue print of the server and it specifies all the object classes and attributes that are available to be searched and stored in a LDAP server.© YIIT- confidential and proprietary

29. Operational attributes are used by the directory it self to store information about entries

30. This attributes are not designed for use by end user© YIIT- confidential and proprietary

33. An entry consists of a set of attributes.

34. An attribute has a name (an attribute type or attribute description) and one or more values.

35. The attributes are defined in a schema© YIIT- confidential and proprietary

38. Each entry that is neither a domain or organizational unit is called a leaf. © YIIT- confidential and proprietary

39. 9/16/2010 13 Basic LDAP hierarchy: © YIIT- confidential and proprietary

40. 9/16/2010 14 Example: © YIIT- confidential and proprietary

42. Start TLS - protect the connection with Transport Layer Security (TLS), to have a more secure connection,

43. Search - search for and/or retrieve directory entries,

44. Compare - test if a named entry contains a given attribute value,

45. Add a new entry,

46. Delete/ Modify an entry,

47. Modify DN - move or rename an entry,

48. Abandon - abort a previous request,

49. Extended Operation - generic operation used to define other operations,

50. Unbind - close the connection, not the inverse of Bind. © YIIT- confidential and proprietary

51. 9/16/2010 16 “Thank You” © YIIT- confidential and proprietary